security-controls

Enforce OWASP ASVS Level 2 security controls for the Myelin platform.

1|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/Seth-arc/myelin-platform --skill security-controls
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-controls
Source: https://github.com/Seth-arc/myelin-platform/tree/main/primary_build_source/docs/skills/4
Command: npx skills add https://github.com/Seth-arc/myelin-platform --skill security-controls

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill prevents security vulnerabilities by providing a mandatory contract for implementing security controls across the Myelin platform, ensuring consistency and adherence to best practices.

Core Features & Use Cases

  • Security Implementation Contract: Defines minimum security standards aligned to OWASP ASVS Level 2.
  • Comprehensive Coverage: Addresses transport security, encryption at rest, API security, file upload security, secrets management, and security headers.
  • Use Case: Before writing any new API endpoint, authentication middleware, or file upload handler, load this Skill to ensure all security requirements are met from the outset, preventing common vulnerabilities like injection attacks or insecure data handling.

Quick Start

Ensure all API endpoints implement authentication middleware using the provided example.

Frequently Asked Questions about security-controls

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What security controls do I need for API authentication and input validation?

Secure coding requires implementing TLS 1.2+ for transport security, Argon2id hashing for encryption at rest, and parameterized SQL queries. These controls align with OWASP ASVS Level 2 standards to prevent injection attacks and insecure data handling.

How do I implement OWASP ASVS Level 2 secure coding standards?

Implement OWASP ASVS Level 2 secure coding standards by enforcing TLS 1.2+, Argon2id hashing, parameterized SQL queries, and specific security headers like HSTS and CSP. This covers transport security, encryption at rest, and API authentication comprehensively.

What security headers do I need to configure for HSTS and CSP?

Configure security headers like HSTS and CSP to meet OWASP ASVS Level 2 standards. These headers enforce transport security policies and content security rules, preventing common vulnerabilities like injection attacks and insecure data handling across your platform.

Why do I need Argon2id hashing and parameterized SQL queries for secure coding?

Argon2id hashing and parameterized SQL queries are required secure coding controls aligned with OWASP ASVS Level 2. They prevent injection attacks, ensure encryption at rest, and protect against common vulnerabilities in authentication and database operations.

Does this approach work for file upload validation and secrets management?

File upload validation and secrets management are covered by security controls enforcing OWASP ASVS Level 2 standards. Load these controls before writing new file upload handlers or authentication middleware to ensure all security requirements are met from the outset.

When do I need to enforce TLS 1.2+ and encryption at rest controls?

Enforce TLS 1.2+ and encryption at rest controls before writing any new API endpoint, authentication middleware, or file upload handler. This prevents insecure data handling and ensures all security requirements aligned with OWASP ASVS Level 2 are met from the outset.